Privacy Policy

Last updated: 2026-11-06

This policy explains what the Cat Browser app for Android (“the app”, package com.web.secure.catbrowser) and its online services at catbrowser.app and api.catbrowser.app (“Cat services”) process, and why. Cat Browser is published by TENG MENG MOTOR SERVICE (“we”, “us”). Contact: [email protected].

Short version. We do not sell your data and we do not collect your browsing history. The app talks to our servers for its own features (Cat AI, Cat VPN, video download, Cat Search, ad-blocking and Safe Mode lists, remote settings, purchases). For that it uses a random install identifier – not your name, phone number or e-mail. Analytics describe how the app is used, never which sites you visit. Ads (Google AdMob) and install measurement (AppsFlyer) use the advertising ID where you allow it.

On your device
Identifiers and country
What each feature processes
Ads and measurement partners
Legal bases
Children
Retention
Security and transfers
Your choices and rights
Changes and contact

1. Data that stays on your device

Your browsing history, bookmarks, open tabs, passwords and form data saved by the browser, downloads, settings and your Cat AI chat history are stored on your phone. We do not receive them. Clearing the app’s data or uninstalling deletes them.

2. Identifiers and country

Install identifier and device secret. On first launch the app creates a random identifier and our server issues a random secret. Together they get the app a token for Cat services. They are stored on your device; our server stores only keyed hashes of them. Clearing the app’s data or reinstalling creates a new identity.
Hashed device code (abuse prevention). So that reinstalling the app does not reset the free daily allowance of video downloads, the app reads two codes Android gives every app – the “device unique id” of the Widevine DRM module and the Android ID (which is specific to this app on this phone). It never sends them as they are: when it registers with our server it sends only a one-way hash of each (SHA-256 with an app-specific salt), and our server keeps only a further keyed hash, linked to the daily download counter. This code is used only for fair-use limits of free features. It is not used for advertising or analytics, not combined with the advertising ID and not shared. A factory reset changes it.
Country and approximate location. We learn your country (and continent) from Cloudflare, which derives it from your IP address. In addition, when the app registers with our server (first launch and about once a month after that, or when your country appears to change), our server – not your phone – looks up the IP address it sees with a third-party IP-location service (currently ip.openappapi.com). From the answer we keep, linked to your install id: country, region, city, time zone, continent and network operator (ISP name and network number), the country first seen (“home country”) and when, and a short history of country changes. If you have consented to analytics, the app also asks the same service directly for your country (about every 6 hours or when your network changes, never while Cat VPN is on); the phone keeps only the country and continent from that answer. This is approximate location (roughly city level, often only the operator’s region), never GPS. We use it to choose regional content, settings, prices and notification times, to apply fair-use limits, to detect VPN or data-centre use, fraud and abuse, and for aggregate statistics. We do not store your IP address, postal code or precise coordinates; only a keyed hash of your network block is kept for abuse prevention. IP addresses are otherwise used briefly, in memory and hashed, for rate limiting and abuse prevention. Our network and hosting providers (Cloudflare, our server hosts) may keep standard access logs.

3. What each feature processes

Feature	What we process and keep
Usage analytics	App events (app opened, screen viewed, button tapped, feature used, ad shown, purchase screen viewed), session length, app and Android version, device model, language, country and the install id. URLs, page titles, search text and form content are never sent; taps on web content are ignored; in private tabs only the time spent is counted. If you turn on search personalisation (off by default), only a search category is sent, never the words. In the EEA, UK and Switzerland, analytics are sent only after you consent. Raw events are kept for 90 days.
Cat AI	Your messages, any image you attach (a photo, a camera picture or a screenshot of the page) and – only if you tap “Use page” – text from the current page are sent to our AI servers to produce the answer. Your chat history is stored on your phone, not on our servers. We do not store the content of conversations; our logs keep only metadata (length, timing, a hashed id) and daily usage counts for your allowance. If you report an answer, the excerpt you report is kept for up to 30 days to improve safety. Chats are processed on servers we rent and operate; they are not sent to third-party AI companies and are not used for advertising.
Cat VPN	Your phone creates the WireGuard key pair; our server registers your public key and assigns a private tunnel address. To enforce the allowance we keep, per install and per day, the minutes connected and the data used, plus the current session (server, start and last-seen time). We do not log the websites you visit or your DNS queries through the VPN. While you are connected, the VPN server necessarily knows your current IP address and how much data passes through the tunnel; this is held in memory and removed when the session ends. The VPN encrypts traffic between your phone and our server; it does not make you anonymous.
Video download	When a video cannot be extracted on your phone, the page address is sent to our server, which fetches the video for you and deletes the temporary file within hours. Our logs keep the website’s domain only, not the full address. For the daily allowance, downloads made on your phone report only a one-way hash of the file address (never the address), and the counter is kept per device (see “Hashed device code”) until 00:00 UTC. You are responsible for having the right to download the content (see the Terms).
Cat Search	Your query is sent to our search server, which gets results from search providers on your behalf. Queries are not stored with any identifier; our logs contain only counts and timings. To get results, our server (not your phone, and without your IP address) sends the query to search providers such as Serper.dev (Google results), Google, Bing, DuckDuckGo, Wikipedia and YouTube; search suggestions come from Google the same way.
Translation	When you translate a page or selected text, the text is sent through our server to Google Translate (translate.googleapis.com) without your IP address, cookies or install id; if that fails, our own AI servers translate it. The text is not logged; a translation may be cached in memory for a short time.
Ad blocking (Shields) and Safe Mode	Filter and category lists are downloaded from our server. Matching happens on your phone; we do not receive the pages you visit. If you report a wrongly blocked site, we receive only the domain and category. Ad learning (Facebook only, only with analytics consent): when Shields recognises an ad in the Facebook feed, the app sends an anonymous description of the post’s layout – element types and Facebook’s own component names, the reason and a confidence score, short hashes of the page layout, and counts of posts our learned rules hid or that you restored with “Show”. It never contains text, names, links, images, Facebook IDs or cookies, and it is linked only to a keyed hash of the install. Our server turns layouts seen independently on many devices into new filter rules; reports are not stored one by one, and the combined evidence linked to an install is deleted after 14 days.
Cat Account and coins (optional)	If you link a Google or Apple account, we store a keyed hash of that account’s id and, optionally, a display name. We do not store your e-mail address. We keep a ledger of coin balances and changes. When you open a partner website from the app (for example a game tile), a one-time ticket lets that website link its own account to your Cat Account ID, and if you buy that partner’s product in the app, the partner receives the product, order id and your Cat Account ID so it can deliver it.
Purchases	Google Play processes payments; we never see your card details. We receive and store, encrypted, the purchase token, product, order id and status, and use them to unlock Cat Premium, restore purchases and prevent fraud. A verified purchase (product, price, currency, order id) is also reported to AppsFlyer for campaign measurement.
Notifications	When notifications are allowed and turned on, the app registers a Firebase Cloud Messaging token with your language, time zone, app version, notification choices and quiet hours so that we can send app notifications at a suitable time; whether a notification was received, opened or dismissed is counted. The Firebase Installation ID is added only if you consented to analytics. Turning notifications off removes the registration.
Rating feedback	The optional text you type in the rating dialog is stored with your rating, app and Android version and phone model. It is not linked to your install id; e-mail addresses, phone numbers and links in the text are masked automatically.
Deletion and support requests	The e-mail address, request type, optional Cat Account ID and notes you send through the deletion page, plus your country. No IP address or device id is stored.

4. Advertising and measurement partners

Google AdMob may show ads in the app (not to Cat Premium users) and may use the advertising ID and app set ID, device information, your IP address (to estimate general location), ad interactions and diagnostic data to show, limit and measure ads and to prevent fraud, as described in Google’s ad policies. In the EEA, UK and Switzerland, Google’s consent form asks for your choices first; you can change them later in the app’s privacy settings.
AppsFlyer measures which ad campaigns (for example on Google Ads, Meta or TikTok) brought installs and purchases, using the install referrer, the AppsFlyer id, the advertising ID where permitted, verified purchases and ad revenue. AppsFlyer acts as our service provider; it may report installs and purchases (not your name or e-mail) to the ad networks whose campaigns we measure.
Google Firebase (Cloud Messaging and Installations) delivers notifications. Google Play handles billing and app delivery. Google Play Integrity checks, when the app registers, that it is a genuine copy on a genuine device (to stop fake installs). Google Safe Browsing (through Google Play services) checks web addresses on Google’s side to warn you about dangerous sites.
Cloudflare protects and delivers our websites and API.
IP-location service (currently ip.openappapi.com): our server sends it the IP address of the request, and only that, to get the approximate location described in section 2; with analytics consent the app also asks it directly for your country. Nothing else about you is sent to it.
Cloud GPU provider: the computers that run Cat AI are rented from a cloud GPU provider and operated by us; they process chats only to answer them.

These partners process data under their own privacy policies. We do not sell your personal data for money. Ad personalisation and campaign measurement may count as “sharing” for advertising under some laws: you can opt out by withdrawing consent in the app or by resetting or deleting your advertising ID in Android settings (Settings → Privacy → Ads).

5. Legal bases (EEA, UK and similar laws)

Contract: to provide the features you use (Cat AI, VPN, downloads, search, purchases).
Legitimate interests: security, abuse and fraud prevention, fixing problems, and aggregate statistics outside the EEA/UK/CH.
Consent: analytics, notifications and ad personalisation in the EEA, UK and Switzerland. You can withdraw consent at any time.
Legal obligation: accounting and tax records of purchases.

6. Children

Cat Browser is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it. Parents can find tips in the Safe Mode guide.

7. Retention

Data	Kept for
Analytics events	90 days
Reported AI answers	30 days
Approximate location record (country, region, city, time zone, operator)	While the install is used; deleted 400 days after last use, or when you ask us to delete your data
VPN and AI usage counters	The current day (quota period); the VPN session until it ends
Temporary video files	Hours
Rating feedback	Up to 24 months
Deletion requests	12 months after the request
Cat Account, coins, purchase records	While you use the service, and purchase records as long as accounting/tax law requires

8. Security and international transfers

Data is sent over HTTPS and stored on servers we control, with files restricted to the service account; purchase data is additionally encrypted. Our servers and partners may be located outside your country (including in the United States and the European Union). Where required, transfers rely on appropriate safeguards such as standard contractual clauses used by our partners.

9. Your choices and rights

Withdraw analytics or ad consent in the app’s privacy settings; reset or delete your advertising ID in Android settings; turn notifications off in Android settings.
Clear the app’s data or uninstall it to remove local data and your install identity.
Ask for access to, correction of, deletion of or a copy of the data linked to your install or account: use the deletion page or e-mail [email protected]. Include the Cat Account ID if the app shows one. We answer within 30 days.
You may also object to processing based on legitimate interests and complain to your local data protection authority.

10. Changes and contact

We will update this page when our data handling changes; the date at the top shows the latest version. Questions: [email protected].